Measuring the real cost of a TLS handshake under attack
We get asked about measuring the real cost of a TLS handshake under attack more than almost anything else, so here is the long answer.The economics behind itA booter service rents out…
http3
Tail latency is the only latency that matters
We get asked about tail latency is the only latency that matters more than almost anything else, so here is the long answer.Observability firstEvery mitigation decision is logged with its reasons, and…
eBPF maps, hash collisions and a very long night
Over the last few months we have spent a lot of time on eBPF maps, hash collisions and a very long night. This is what we learned.What we got wrongOur first version…
Why our logs are append-only and how we query them (part 2)
why our logs are append-only and how we query them sounds like a narrow topic. It turns out to touch almost every part of how an edge network behaves under attack.Observability firstEvery…
Threat Bulletin 0454: search endpoint flood against a news publisher platform in Western Europe
search endpoint flood against a news publisher platform in Western Europe, peaking at 964.8 million requests per second. Mitigated in 0.613 seconds.
Threat Bulletin 0448: UDP reflection (DNS) against a education platform platform in Iberia
UDP reflection (DNS) against a education platform platform in Iberia, peaking at 367.8 Gbps. Mitigated in 0.688 seconds.
Threat Bulletin 0433: TLS handshake exhaustion against a news publisher platform in Iberia
TLS handshake exhaustion against a news publisher platform in Iberia, peaking at 155.7 million requests per second. Mitigated in 0.489 seconds.
Threat Bulletin 0420: login endpoint flood against a online payments platform in Latin America
login endpoint flood against a online payments platform in Latin America, peaking at 959.0 million requests per second. Mitigated in 0.885 seconds.
Threat Bulletin 0401: HTTP/2 rapid reset against a ticketing platform in the Benelux
HTTP/2 rapid reset against a ticketing platform in the Benelux, peaking at 541.2 million requests per second. Mitigated in 0.902 seconds.
Threat Bulletin 0396: WebSocket connection flood against a retail banking platform in Central Europe
WebSocket connection flood against a retail banking platform in Central Europe, peaking at 837.3 million requests per second. Mitigated in 0.887 seconds.
Threat Bulletin 0376: login endpoint flood against a online casino platform in the UK
login endpoint flood against a online casino platform in the UK, peaking at 230.2 million requests per second. Mitigated in 0.761 seconds.
Threat Bulletin 0351: WebSocket connection flood against a video streaming platform in Western Europe
WebSocket connection flood against a video streaming platform in Western Europe, peaking at 681.7 million requests per second. Mitigated in 0.784 seconds.